v1.20.0

🚨 Breaking or Notable Changes

Metrics and Tracing

In v1.19 we've dropped support for OpenCensus (which has been deprecated for a while) in favour of OpenTelemetry. This is a breaking change and details are documented here in the design document. and the website (https://knative.dev/docs/serving/observability/metrics/collecting-metrics/)

Secure Pod Defaults (#16042, @nader-ziada)

We've introduce secure-pod-defaults in an earlier release but this release includes a new setting AllowRootBounded that offers a better security posture for your workloads but balances the compatibility with images that require/expect you to run as root.

For v1.20 release the secure-pod-defaults default will remain disabled but in a future release (most likely v1.21) we will switch this default to AllowRootBounded.

If you're unsure whether your workloads will support this new setting you should explicitly set this option to disabled prior to upgrading to v1.21.

For more information see the documentation and reach out if you foresee issues in your testing.

💫 New Features & Changes

• Create a new value for secure-pod-defaults: AllowRootBounded
  • when AllowRootBounded, defaults SeccompProfile and Capabilities if nil
  • when enabled sets RunAsNonRoot to true if not already specified (#16042, @nader-ziada)
• Made it possible to configure the httputil.ReverseProxy or add http.Handlers to queue-proxy in out-of-tree builds. (#16097, @mbaynton)
• Podspec-dryrun feature flag has been removed. Dry run validation will now occur when a user opts into it using kubectl apply --dry-run=server (#16008, @Alexander-Kita)
• Add distinct logging for timeout types by @thiagomedina in #16109
• drop unnecessary 'kn.activator.proxy' metric/span attribute by @dprotaso in #16045
• bump Istio to v1.27 and Contour to v1.33 by @dprotaso in #16099
• Keep queue-proxy admin server on HTTP for PreStop hooks by @Fedosin in #16163

🐞Bug Fixes

• Fix min-scale transition by @dprotaso in #16094
• Add initialize conditions to MakePA to avoid potential race conditions by @nader-ziada in #16037
• For orphaned certificates if we have an issue listing just log the error by @dprotaso in #16096
• Fix queue proxy user metrics port by @dprotaso in #16018
• drop unused metrics domain env var by @dprotaso in #16019
• fix otelhttp setup in activator by @dprotaso in #16044
• Drop probe tracing in queue-proxy by @dprotaso in #16048
• Adjust queue proxy metric attributes by @dprotaso in #16049
• Serving Metric Tweaks by @dprotaso in #16062
• Fix: PodAutoscaler not reconciled due to missing class annotation by @nader-ziada in #16141

New Contributors

• @Alexander-Kita made their first contribution in #16008
• @mbaynton made their first contribution in #16097
• @thiagomedina made their first contribution in #16109
• @ali-a-a made their first contribution in #16201

Dependencies

Added

• github.com/prometheus/otlptranslator: v1.0.0
• golang.org/x/tools/go/expect: v0.1.1-deprecated
• golang.org/x/tools/go/packages/packagestest: v0.1.1-deprecated

Changed

• cel.dev/expr: v0.23.0 → v0.24.0
• cloud.google.com/go/compute/metadata: v0.6.0 → v0.7.0
• github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp: v1.27.0 → v1.29.0
• github.com/cenkalti/backoff/v5: v5.0.2 → v5.0.3
• github.com/census-instrumentation/opencensus-proto: v0.4.1 → v0.2.1
• github.com/cncf/xds/go: ae57f3c → 2ac532f
• github.com/go-jose/go-jose/v4: v4.0.5 → v4.1.1
• github.com/golang/glog: v1.2.4 → v1.2.5
• github.com/grpc-ecosystem/grpc-gateway/v2: v2.27.1 → v2.27.2
• github.com/prometheus/client_golang: v1.22.0 → v1.23.2
• github.com/prometheus/common: v0.65.0 → v0.66.1
• github.com/prometheus/procfs: v0.16.1 → v0.17.0
• github.com/spf13/pflag: v1.0.6 → v1.0.10
• github.com/stretchr/testify: v1.10.0 → v1.11.1
• go.opentelemetry.io/contrib/detectors/gcp: v1.35.0 → v1.36.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp: v0.62.0 → v0.63.0
• go.opentelemetry.io/contrib/instrumentation/runtime: v0.62.0 → v0.63.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc: v1.37.0 → v1.38.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp: v1.37.0 → v1.38.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc: v1.37.0 → v1.38.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp: v1.37.0 → v1.38.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace: v1.37.0 → v1.38.0
• go.opentelemetry.io/otel/exporters/prometheus: v0.59.0 → v0.60.0
• go.opentelemetry.io/otel/exporters/stdout/stdouttrace: v1.37.0 → v1.38.0
• go.opentelemetry.io/otel/metric: v1.37.0 → v1.38.0
• go.opentelemetry.io/otel/sdk/metric: v1.37.0 → v1.38.0
• go.opentelemetry.io/otel/sdk: v1.37.0 → v1.38.0
• go.opentelemetry.io/otel/trace: v1.37.0 → v1.38.0
• go.opentelemetry.io/otel: v1.37.0 → v1.38.0
• go.opentelemetry.io/proto/otlp: v1.7.0 → v1.7.1
• go.yaml.in/yaml/v3: v3.0.3 → v3.0.4
• golang.org/x/crypto: v0.39.0 → v0.43.0
• golang.org/x/mod: v0.25.0 → v0.29.0
• golang.org/x/net: v0.41.0 → v0.46.0
• golang.org/x/sync: v0.15.0 → v0.17.0
• golang.org/x/sys: v0.33.0 → v0.37.0
• golang.org/x/telemetry: bda5523 → 078029d
• golang.org/x/term: v0.32.0 → v0.36.0
• golang.org/x/text: v0.26.0 → v0.30.0
• golang.org/x/tools: v0.34.0 → v0.38.0
• gonum.org/v1/gonum: 3f7ecaa → v0.16.0
• google.golang.org/genproto/googleapis/api: 513f239 → c5933d9
• google.golang.org/genproto/googleapis/rpc: 513f239 → c5933d9
• google.golang.org/grpc: v1.73.0 → v1.75.0
• google.golang.org/protobuf: v1.36.6 → v1.36.8
• k8s.io/api: v0.33.1 → v0.33.5
• k8s.io/apiextensions-apiserver: v0.33.1 → v0.33.5
• k8s.io/apimachinery: v0.33.1 → v0.33.5
• k8s.io/apiserver: v0.33.1 → v0.33.5
• k8s.io/client-go: v0.33.1 → v0.33.5
• k8s.io/code-generator: v0.33.1 → v0.33.5
• k8s.io/component-base: v0.33.1 → v0.33.5
• k8s.io/kms: v0.33.1 → v0.33.5
• knative.dev/caching: fd36b19 → 09d3ca0
• knative.dev/hack: 70d4b00 → 4fae780
• knative.dev/networking: edb1a4a → 0bde191
• knative.dev/pkg: 19d3cc2 → 7bf6feb
• sigs.k8s.io/yaml: v1.5.0 → v1.6.0

Removed

• contrib.go.opencensus.io/exporter/ocagent: 05415f1
• contrib.go.opencensus.io/exporter/prometheus: v0.4.2
• contrib.go.opencensus.io/exporter/zipkin: v0.1.2
• github.com/go-kit/log: v0.2.1
• github.com/go-logfmt/logfmt: v0.5.1
• github.com/openzipkin/zipkin-go: v0.4.3
• github.com/prometheus/statsd_exporter: v0.22.7

Full Changelog: knative-v1.19.0...knative-v1.20.0

v1.19.7

🚨 Breaking or Notable Changes

We've dropped support for OpenCensus (which has been deprecated for a while) in favour of OpenTelemetry. This is a breaking change and details are documented here in the design document. and the website (https://knative.dev/docs/serving/observability/metrics/collecting-metrics/)

What's Changed

• [release-1.19] Fix min-scale transition by @knative-prow-robot in #16101
• [release-1.19] Upgrade to latest dependencies by @knative-automation in #16192
• [release-1.19] Fix: PodAutoscaler not reconciled due to missing class annotation by @knative-prow-robot in #16191
• [release-1.19] Fix: controller crash due to metric panic

Full Changelog: knative-v1.19.6...knative-v1.19.7

v1.18.2

What's Changed

• [release-1.18] Fix min-scale transition by @knative-prow-robot in #16100
• [release-1.18] Fix: PodAutoscaler not reconciled due to missing class annotation by @knative-prow-robot in #16190

Full Changelog: knative-v1.18.1...knative-v1.18.2

v1.19.6

v1.19.6

🚨 Breaking or Notable Changes

We've dropped support for OpenCensus (which has been deprecated for a while) in favour of OpenTelemetry. This is a breaking change and details are documented here in the design document. and the website (https://knative.dev/docs/serving/observability/metrics/collecting-metrics/)

What's Changed

• [release-1.19] Serving Metric Tweaks by @knative-prow-robot in #16063
• [release-1.19] Fix work queue depth metric calculation in #16084

Full Changelog: knative-v1.19.5...knative-v1.19.6

v1.19.5

🚨 Breaking or Notable Changes

We've dropped support for OpenCensus (which has been deprecated for a while) in favour of OpenTelemetry. This is a breaking change and details are documented here in the design document. Website updates are currently in progress.

What's Changed

What's Changed

• [release-1.19] Fix release script @dprotaso

Full Changelog: knative-v1.19.4...knative-v1.19.5

v1.19.4

v1.19.4

v1.19.3

🚨 Breaking or Notable Changes

We've dropped support for OpenCensus (which has been deprecated for a while) in favour of OpenTelemetry. This is a breaking change and details are documented here in the design document. Website updates are currently in progress.

What's Changed

• [release-1.19] fix otelhttp setup in activator by @knative-prow-robot in #16046
• [release-1.19] drop unnecessary 'kn.activator.proxy' metric/span attribute by @knative-prow-robot in #16047
• [release-1.19] Drop probe tracing in queue-proxy by @knative-prow-robot in #16050
• [release-1.19] Adjust queue proxy metric attributes by @knative-prow-robot in #16051

Full Changelog: knative-v1.19.2...knative-v1.19.3

v1.19.3

v1.19.3

🚨 Breaking or Notable Changes

We've dropped support for OpenCensus (which has been deprecated for a while) in favour of OpenTelemetry. This is a breaking change and details are documented here in the design document. Website updates are currently in progress.

What's Changed

• [release-1.19] fix otelhttp setup in activator by @knative-prow-robot in #16046
• [release-1.19] drop unnecessary 'kn.activator.proxy' metric/span attribute by @knative-prow-robot in #16047
• [release-1.19] Drop probe tracing in queue-proxy by @knative-prow-robot in #16050
• [release-1.19] Adjust queue proxy metric attributes by @knative-prow-robot in #16051

Full Changelog: knative-v1.19.2...knative-v1.19.3

v1.19.2

🚨 Breaking or Notable Changes

We've dropped support for OpenCensus (which has been deprecated for a while) in favour of OpenTelemetry. This is a breaking change and details are documented here in the design document. Website updates are currently in progress.

What's Changed

• Fix OTel metrics exporting by bumping dependencies (@dprotaso)
• [release-1.19] Upgrade to latest dependencies by @knative-automation in #16035

Full Changelog: knative-v1.19.1...knative-v1.19.2

v1.19.1

Caution

This is currently a pre-release as we have encountered issues with our OpenTelemetry support (specifically prometheus pull exporter - see knative/pkg#3224)

What's Changed

Full Changelog: knative-v1.19.0...knative-v1.19.1

Changes by Kind

🚨 Breaking or Notable Changes

We've dropped support for OpenCensus (which has been deprecated for a while) in favour of OpenTelemetry. This is a breaking change and details are documented here in the design document. Website updates are currently in progress.

What's Changed

• Fix prometheus pull metric names @dprotaso
• [release-1.19] fix a tracing protocol comment [skip-dot-release] by @knative-prow-robot in #16016
• [release-1.19] Fix queue proxy user metrics port by @knative-prow-robot in #16021
• [release-1.19] Upgrade to latest dependencies by @knative-automation in #16025

v1.19.0

Caution

This is currently a pre-release as we have encountered issues with our OpenTelemetry support (specifically prometheus pull exporter - see knative/pkg#3224)

Changes by Kind

🚨 Breaking or Notable Changes

We've dropped support for OpenCensus (which has been deprecated for a while) in favour of OpenTelemetry. This is a breaking change and details are documented here in the design document. Website updates are currently in progress.

Bug or Regression

• Fix labels and annotations propagation to k8s service on update (#15892, @dsimansk)

Uncategorized

• Knative Serving now supports Kubernetes’ new "image" volume type. (#15878, @Fedosin)
• System_internal_tls_test.go:110: TLS not used on requests to queue-proxy: pods "system-internal-tls-mjhqutwi-00001-deployment-6b84b959d7-mjkcs" not found (#15895, @maschmid)

Dependencies

Added

• github.com/cenkalti/backoff/v5: v5.0.2
• github.com/spiffe/go-spiffe/v2: v2.5.0
• github.com/zeebo/errs: v1.4.0
• go.opentelemetry.io/contrib/instrumentation/runtime: v0.62.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc: v1.37.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp: v1.37.0
• go.opentelemetry.io/otel/exporters/prometheus: v0.59.0
• go.opentelemetry.io/otel/exporters/stdout/stdouttrace: v1.37.0
• go.yaml.in/yaml/v2: v2.4.2
• go.yaml.in/yaml/v3: v3.0.3
• sigs.k8s.io/randfill: v1.0.0

Changed

• cel.dev/expr: v0.19.1 → v0.23.0
• github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp: v1.25.0 → v1.27.0
• github.com/cncf/xds/go: cff3c89 → ae57f3c
• github.com/go-jose/go-jose/v4: v4.0.2 → v4.0.5
• github.com/go-logr/logr: v1.4.2 → v1.4.3
• github.com/golang-jwt/jwt/v4: v4.5.1 → v4.5.2
• github.com/golang/mock: v1.4.4 → v1.1.1
• github.com/google/btree: v1.0.1 → v1.1.3
• github.com/google/cel-go: v0.22.0 → v0.23.2
• github.com/gorilla/websocket: v1.5.3 → e064f32
• github.com/grpc-ecosystem/grpc-gateway/v2: v2.26.1 → v2.27.1
• github.com/klauspost/compress: v1.17.11 → v1.18.0
• github.com/prometheus/client_golang: v1.20.5 → v1.22.0
• github.com/prometheus/client_model: v0.6.1 → v0.6.2
• github.com/prometheus/common: v0.62.0 → v0.65.0
• github.com/prometheus/procfs: v0.15.1 → v0.16.1
• go.etcd.io/etcd/api/v3: v3.5.16 → v3.5.21
• go.etcd.io/etcd/client/pkg/v3: v3.5.16 → v3.5.21
• go.etcd.io/etcd/client/v2: v2.305.16 → v2.305.21
• go.etcd.io/etcd/client/v3: v3.5.16 → v3.5.21
• go.etcd.io/etcd/pkg/v3: v3.5.16 → v3.5.21
• go.etcd.io/etcd/raft/v3: v3.5.16 → v3.5.21
• go.etcd.io/etcd/server/v3: v3.5.16 → v3.5.21
• go.opentelemetry.io/contrib/detectors/gcp: v1.34.0 → v1.35.0
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc: v0.54.0 → v0.58.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp: v0.58.0 → v0.62.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc: v1.27.0 → v1.37.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp: v1.33.0 → v1.37.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace: v1.28.0 → v1.37.0
• go.opentelemetry.io/otel/metric: v1.34.0 → v1.37.0
• go.opentelemetry.io/otel/sdk/metric: v1.34.0 → v1.37.0
• go.opentelemetry.io/otel/sdk: v1.34.0 → v1.37.0
• go.opentelemetry.io/otel/trace: v1.34.0 → v1.37.0
• go.opentelemetry.io/otel: v1.34.0 → v1.37.0
• go.opentelemetry.io/proto/otlp: v1.3.1 → v1.7.0
• golang.org/x/crypto: v0.37.0 → v0.39.0
• golang.org/x/lint: 738671d → d0100b6
• golang.org/x/mod: v0.24.0 → v0.25.0
• golang.org/x/net: v0.39.0 → v0.41.0
• golang.org/x/oauth2: v0.26.0 → v0.30.0
• golang.org/x/sync: v0.13.0 → v0.15.0
• golang.org/x/sys: v0.32.0 → v0.33.0
• golang.org/x/term: v0.31.0 → v0.32.0
• golang.org/x/text: v0.24.0 → v0.26.0
• golang.org/x/tools: v0.32.0 → v0.34.0
• google.golang.org/genproto/googleapis/api: e9438ea → 513f239
• google.golang.org/genproto/googleapis/rpc: e9438ea → 513f239
• google.golang.org/grpc: v1.71.1 → v1.73.0
• honnef.co/go/tools: v0.0.1-2020.1.4 → ea95bdf
• k8s.io/api: v0.32.2 → v0.33.1
• k8s.io/apiextensions-apiserver: v0.32.1 → v0.33.1
• k8s.io/apimachinery: v0.32.2 → v0.33.1
• k8s.io/apiserver: v0.32.1 → v0.33.1
• k8s.io/client-go: v0.32.2 → v0.33.1
• k8s.io/code-generator: v0.32.2 → v0.33.1
• k8s.io/component-base: v0.32.1 → v0.33.1
• k8s.io/gengo/v2: 2b36238 → 1244d31
• k8s.io/kms: v0.32.1 → v0.33.1
• k8s.io/kube-openapi: 2c72e55 → c8a335a
• knative.dev/caching: 8f20a11 → fd36b19
• knative.dev/hack: c577ed9 → 70d4b00
• knative.dev/networking: 6268d93 → edb1a4a
• knative.dev/pkg: ed3e215 → 19d3cc2
• sigs.k8s.io/apiserver-network-proxy/konnectivity-client: v0.31.0 → v0.31.2
• sigs.k8s.io/structured-merge-diff/v4: v4.5.0 → v4.6.0
• sigs.k8s.io/yaml: v1.4.0 → v1.5.0

Removed

• cloud.google.com/go/bigquery: v1.8.0
• cloud.google.com/go/datastore: v1.1.0
• cloud.google.com/go/pubsub: v1.3.1
• cloud.google.com/go/storage: v1.10.0
• dmitri.shuralyov.com/gpu/mtl: 666a987
• github.com/BurntSushi/xgb: 27f1227
• github.com/IBM/sarama: v1.43.1
• github.com/Shopify/sarama: v1.19.0
• github.com/Shopify/toxiproxy: v2.1.4+incompatible
• github.com/alecthomas/template: fb15b89
• github.com/chzyer/logex: v1.1.10
• github.com/chzyer/readline: 2972be2
• github.com/chzyer/test: a1ea475
• github.com/eapache/go-resiliency: v1.6.0
• github.com/eapache/go-xerial-snappy: c322873
• github.com/eapache/queue: v1.1.0
• github.com/go-gl/glfw/v3.3/glfw: 6f7a984
• github.com/go-gl/glfw: e6da0ac
• github.com/go-kit/kit: v0.9.0
• github.com/go-stack/stack: v1.8.0
• github.com/go-task/slim-sprig: 52ccab3
• github.com/gogo/googleapis: v1.1.0
• github.com/google/martian/v3: v3.0.0
• github.com/google/martian: v2.1.0+incompatible
• github.com/google/renameio: v0.1.0
• github.com/gorilla/context: v1.1.1
• github.com/hashicorp/go-uuid: v1.0.3
• github.com/hpcloud/tail: v1.0.0
• github.com/ianlancetaylor/demangle: 5e5cf60
• github.com/jcmturner/aescts/v2: v2.0.0
• github.com/jcmturner/dnsutils/v2: v2.0.0
• github.com/jcmturner/gofork: v1.7.6
• github.com/jcmturner/gokrb5/v8: v8.4.4
• github.com/jcmturner/rpc/v2: v2.0.3
• github.com/jstemmer/go-junit-report: v0.9.1
• github.com/konsorten/go-windows-terminal-sequences: v1.0.3
• github.com/kr/logfmt: b84e30a
• github.com/lyft/protoc-gen-validate: v0.0.13
• github.com/onsi/ginkgo: v1.7.0
• github.com/pierrec/lz4/v4: v4.1.21
• github.com/pkg/profile: v1.2.1
• github.com/rabbitmq/amqp091-go: v1.9.0
• github.com/rcrowley/go-metrics: cf1acfc
• github.com/streadway/amqp: 75d898a
• github.com/stvp/go-udp-testing: [469649b](https://githu...